Get the latest tech news
Determining IaC ownership – a tag-based approach
Infrastructure as Code (IaC) is a major tool for creating scalable environments in the cloud. With a single command, you can create hundreds of accounts, servers, policies, and identities. It is a tough task to monitor identities, especially non-human identities (NHIs), but IaC-generated identities make it even harder.
terraform plan- Reads the code and compares it to the current state, calculates the differences and generates an executable format that a dedicated role in your CSP can use. However, Terraform logs don’t focus on this part of resource formation and mainly provide functional monitoring for basic deployment steps. A DevOps engineer with full control over an IaC repository would not face the same constraints, making this approach a strong candidate for implementation and further exploration.
Or read this on Hacker News
